Description
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which leads to path disclosure, possibly related to invalid SQL syntax.
References
- 413 third-party-advisory
- 20060204 [KAPDA::#26] - MyTopix Sql Injection & Path Disclosure mailing-list
- http://kapda.ir/advisory-249.html